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ABSTRACT 

Task  scheduling  is  investigated  for  a  set  of  generic  tasks  representative  of  a  heavily  loaded 
mission  computer  application.  A  number  of  commonly  used  scheduling  algorithms  are  applied  to 
the  generic  task  set,  and  a  range  of  schedulability  analysis  calculations  are  performed.  Suitability 
of  the  scheduling  algorithms  to  the  mission  computer  application  is  determined,  and 
characteristics  of  different  schedulability  analysis  techniques  are  established  through  their 
application  to  the  generic  task  set. 
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An  Analysis  of  Task  Scheduling  for  a  Generic 
Avionics  Mission  Computer 


Executive  Summary 

Software  developed  for  real-time  mission  computing  applications  is  typically  partitioned 
into  a  number  of  tasks  requiring  independent  execution.  Scheduling  the  execution  of  these 
tasks  on  a  multi-tasking  computer  requires  observance  of  timing  constraints  for  each  and 
every  task  if  tasks  are  to  meet  their  real-time  performance  goals.  The  difficulty  of 
achieving  a  scheduling  solution  increases  as  total  processor  loading  increases,  and  task 
scheduling  assumes  a  significant  importance  in  the  development  of  avionics  mission 
computer  software. 

DSTO  task  DST  00/ 061,  "Avionics  Enabling  Research  and  Development",  has  developed 
models  of  avionics  mission  systems  to  support  analysis  of  mission  computers  and  their 
task  sets.  This  report  documents  analysis  performed  in  support  of  model  development, 
considering  a  number  of  commonly  used  scheduling  algorithms  and  schedulability 
analysis  methods.  Performance  of  each  scheduling  algorithm  is  determined  for  a 
representative  mission  computer  and  task  set,  and  characteristics  of  different  analysis 
methods  are  presented. 

The  scheduling  algorithms  and  schedulability  analyses  that  are  documented  in  this  report 
will  assist  in  model  construction,  permitting  simulation  and  evaluation  of  mission 
computer  software  architectures  to  identify  performance  risks,  to  assess  alternative 
architectures,  and  to  predict  the  impact  of  changes  to  an  architecture. 
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1.  Introduction 


Software  developed  for  real-time  applications  is  typically  partitioned  into  separate  tasks 
exhibiting  logical  or  temporal  independence.  Executing  these  software  tasks  on  a 
multi-tasking  real-time  computer  system  requires  observance  of  timing  constraints  for 
every  task,  in  order  to  meet  the  required  levels  of  real-time  performance.  Judicious 
resolution  of  the  competing  demands  of  multiple  tasks  is  needed  if  all  tasks  are  to  meet 
their  timing  constraints,  and  is  identified  as  the  problem  of  task  execution  scheduling. 

Task  scheduling  can  be  approached  as  part  of  the  software  system  design,  resulting  in  a 
statically  determined  tasking  schedule  that  is  followed  at  execution  time.  This  approach 
offers  efficient  run-time  operation,  but  suffers  from  the  need  to  go  through  a  potentially 
costly  schedule  design  change  when  any  single  task  is  changed.  An  alternative  is  to 
employ  a  dynamic  scheduling  algorithm  to  perform  task  scheduling  at  run-time,  where 
predictable  algorithm  operation  allows  analysis  to  confirm  acceptable  performance  for  a 
given  set  of  tasks.  The  disadvantages  of  dynamic  scheduling  include  additional 
complexity  and  run-time  overheads  in  the  run-time  kernel. 

This  report  considers  a  number  of  commonly  used  approaches  to  task  scheduling  and 
applies  them  to  a  hypothetical  mission  system.  A  range  of  schedulability  analysis 
calculations  are  used  to  demonstrate  methods  for  confirming  whether  scheduling 
performance  will  be  satisfactory,  and  some  general  conclusions  are  drawn  on  the  strengths 
and  weaknesses  of  scheduling  approaches  and  analysis  methods. 


2.  Task  Set  Specification 

Locke  et  al  [1]  have  developed  an  informal  specification  for  a  set  of  mission  computer 
tasks  on  a  hypothetical  avionics  mission  system.  This  specification  provides  a  realistic 
example  of  the  type  of  mission  computing  demands  encountered  in  currently  fielded 
fighter  aircraft  with  legacy  16-bit  mission  computer  architectures.  Total  loading  on  the 
mission  computer  is  very  high,  presenting  a  demanding  scenario  to  use  in  the 
investigation  of  task  scheduling  solutions. 

The  mission  computer  task  set  developed  by  Locke  et  al  [1]  is  summarised  in  Table  1, 
where  timings  are  given  in  units  of  milliseconds.  Aperiodic  tasks  are  handled  by 
scheduling  them  periodically  with  periods  equal  to  their  deadlines.  There  are  no  inter-task 
synchronisation  or  communication  requirements,  allowing  all  tasks  to  execute 
independently.  Only  a  single  processor  is  available  to  be  used  for  the  execution  of  all  tasks. 
Tasks  that  were  specified  with  maximum  periods  of  55  and  52  ms  have  had  their  periods 
rounded  down  to  50  ms,  to  simplify  analysis  at  the  expense  of  slightly  increasing  total 
processor  utilisation.  Processor  utilisation  is  97.  5%,  compared  with  95.  1%  before 
rounding  down  any  task  periods. 
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Table  1.  Generic  avionics  mission  system  tasks 


Task  Name 

Computation  Time  (ms) 

Period  (ms) 

Deadline  (ms) 

Weapon  release 

1 

10 

5 

Radar  tracking 

2 

40 

Target  tracking 

4 

40 

Target  sweetening 

2 

40 

HOT  AS  bomb  button 

1 

40 

Aircraft  flight  data 

8 

50  (55) 

HUD  display 

6 

50  (52) 

MPD  tactical  display 

8 

50  (52) 

Steering 

6 

80 

Weapon  trajectory 

7 

100 

Threat  response  display 

3 

100 

AUTO/CCIP  toggle 

1 

200 

Poll  RWR 

2 

200 

Reinitiate  trajectory 

6 

400 

Periodic  BIT 

5 

1000 

400 

3.  Schedulability  Analyses 

Task  scheduling  solutions  can  be  broadly  categorised  according  to  whether  they  are 
statically  determined  or  dynamically  determined  using  a  run-time  scheduling  algorithm. 
Within  the  category  of  dynamic  scheduling,  prioritisation  of  tasks  can  be  statically  fixed  or 
dynamically  determined  at  run-time,  and  task  preemption  may  or  may  not  be  used.  The 
following  sections  demonstrate  schedulability  analyses  for  a  number  of  variations  of 
dynamically  determined  scheduling,  and  a  single  statically  determined  schedule  is  also 
presented. 

3.1  Preemptive  Fixed  Priority  Scheduling 

Preemptive  scheduling  of  tasks  according  to  fixed  priorities  can  be  analysed  in  a  number 
of  ways  if  appropriate  conditions  are  met.  For  the  purposes  of  demonstrating  the  different 
schedulability  analyses,  variations  will  be  made  to  the  task  set  specifications  where 
necessary  to  allow  an  analysis  to  be  applied.  Analysis  is  performed  using  the  basic 
rate-monotonic  schedulability  test  in  §3.1.1,  using  processor  workload  demand  in  §3.1.2, 
and  using  task  response  times  in  §3.1.3. 

3.1.1  Basic  Rate-Monotonic  Schedulability  Test 

Algorithms  for  preemptive  scheduling  of  statically  and  dynamically  prioritised  computer 
tasks  were  investigated  by  Liu  and  Layland  [2],  who  coined  the  term  rate-monotonic 
scheduling  to  describe  the  assignment  of  fixed  task  priorities  based  on  a  monotonic 
ordering  of  task  invocation  rate.  They  proved  the  rate-monotonic  scheduling  algorithm 
was  an  optimal  scheduling  algorithm,  in  that  no  other  fixed  priority  scheduling  algorithm 
could  schedule  a  task  set  that  could  not  be  scheduled  using  the  rate-monotonic  algorithm. 
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They  also  developed  a  basic  schedulability  test  that  establishes  a  sufficient,  but  not 
necessary,  condition  for  confirming  that  a  set  of  tasks  will  be  successfully  scheduled. 

Although  the  generic  avionics  mission  system  tasks  do  not  have  all  task  deadlines  equal  to 
task  periods  as  required  by  the  rate-monotonic  algorithm,  it  is  not  impossible  for  the 
algorithm  to  successfully  schedule  such  task  sets  and  the  analysis  will  still  be  performed. 
For  this  analysis,  it  will  be  assumed  that  the  deadline  for  the  Weapon  release  task  is  10  ms, 
and  that  the  deadline  for  the  Periodic  BIT  task  is  1000  ms.  The  basic  rate-monotonic 
schedulability  test  uses  task  computation  times  Ci  and  periods  Ti  ,  for  each  task  i ,  to 
calculate  total  processor  utilisation  which  must  be  less  than  the  utilisation  bound  U {n )  for 

the  number  of  tasks  n  .  The  following  inequality  expresses  this  schedulability  test,  and  it  is 
applied  to  the  tasks  of  the  generic  avionics  mission  system, 

i= 1  + 


1  2+4+2+1  8+6+8  6  7+3  1+2  6  5 

To+  40  +  50  +80+7oo"+  200  +400  +  K)00 

0.975 


<C/(15)  =15(2^  -1), 
<  t/(15)  =  0.709. 


Since  the  processor  utilisation  of  0. 975  exceeds  the  utilisation  bound  of  0.  709,  the  task  set 
is  not  guaranteed  schedulable  by  the  rate-monotonic  algorithm.  Failing  this  sufficient,  but 
not  necessary,  condition  for  schedulability,  further  analysis  is  required  to  confirm  that  the 
task  set  is  indeed  not  schedulable. 


3.1.2  Workload  Analysis 

Lehoczky  et  al  [3]  have  developed  a  workload  analysis  that  determines  a  necessary  and 
sufficient  condition  for  rate-monotonic  schedulability.  This  analysis  is  useful  to  determine 
task  set  schedulability  in  cases  where  the  basic  rate-monotonic  schedulability  test  can  not 
confirm  schedulability.  The  analysis  requires  that  task  deadlines  be  equal  to  task  periods, 
so  it  will  again  be  assumed  that  the  deadline  for  the  Weapon  release  task  is  10  ms,  and  that 
the  deadline  for  the  Periodic  BIT  task  is  1000  ms. 

Performing  the  analysis  involves  the  calculation  of  cumulative  processor  workload 
demands  Wi  ( t ) ,  for  each  task  i  over  a  closed  interval  of  time  [0, /] ,  and  corresponding 
loadings  Lt  (t) ,  L:  and  L  .  These  values  are  defined  by  the  formulae 


+<o =Scj 

j= i 
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A(0 


m) 

/ 

t 


L .  =  min  Z,  ( t ) ,  and 

o</<7;. 


Z  =  max  Z, . 

\<i<n 


A  simplification  is  made  to  avoid  minimisation  over  the  continuous  variable  t ,  by  testing 
at  the  rate-monotonic  scheduling  points  of  the  piecewise  monotonically  decreasing  Z,  (/) , 
which  yield  local  minima.  These  scheduling  points  occur  at  multiples  of  the  periods  of 
tasks  of  higher  priority  than  task  i ,  and  for  task  i  are  represented  by  the  set 


S,  = 


kT- 


Task  i  is  schedulable  by  the  rate-monotonic  algorithm  if  and  only  if  the  loading  Lj 
satisfies  the  rate-monotonic  workload  analysis  schedulability  test  of 

Z,  =  min  Z  (t)  <  1 , 

reS, 

and  the  entire  task  set  is  schedulable  by  the  rate-monotonic  algorithm  if  and  only  if 
Z  =  max  Z  <  1 . 

1  <i<n 


To  determine  if  the  tasks  of  the  generic  avionics  mission  system  are  schedulable  by  the 
rate-monotonic  algorithm,  it  is  efficient  to  first  determine  the  largest  subset  of  tasks  that 
can  be  proved  to  be  schedulable  using  the  basic  rate-monotonic  schedulability  test. 
Starting  with  the  highest  priority  task,  and  incrementally  adding  tasks  until  the  basic 
rate-monotonic  schedulability  test  fails. 


i  r 

=o.i  < 

1 


(  i  ' 

21  -1 


=  1.0, 


3  c 

y^  =  0.25 
VtTt 


<  2 


<  3 


f  1  A 

2 2  -1 
v  J 

(  l  3 

2 3  -1 
v  J 


0.828, 

0.780, 


f  i 


V  ) 


0.757 , 
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5  c 

=  0.325  <  5 

Z—j  rr 


rr T 

i= 1  iz 


i=i  / 
7 


C 


T-» 

*=1  iz 


C. 


rp 

i= 1  1i 


6  /-’ 

y^  =  0.485  <  6 
“  T, 


V^  =  0.605  <  7 

Z— ^  rp 


y^  =  0.765  <  8 

7_t 


6  i  A 

2 5  -1  =0.743, 

v  y 

7  I  7 

26  -1  =0.735, 
v  y 

7  1  A 

2 7  -1 
v  y 
6  I  3 

2  s  -1 
v  y 


=  0.729, 


=  0.724 . 


The  basic  schedulability  test  confirms  that  the  seven  highest  priority  tasks  are  schedulable, 
but  not  the  eighth  task.  To  determine  the  schedulability  of  the  eighth  task,  the  scheduling 
points  and  loadings  for  the  task  are  calculated. 


S„  = 


kT, 


,8;  k  = 

8 

1+ 

7=1 

10 

77 

T 


=  {10,20,30,40,50}, 


Z8(10)  = 


10 


10 


1+2+4+2+1+8+6+8 

10 


32 

10' 


4(20) 


*4(20) 

20 


20 


2(1)  + 2 +  4  + 2  + 1  +  8 +  6  +  8  _  33 
20  ~  20 ' 


4(30) 


*4(2Q) 

30 


30 


3(1)  +  2  +  4  +  2  +  1  +  8  +  6  +  8  _  34 
30  “ 30' 


4(40)  = 


*4(40) 

40 


40 


4(1)  +  2  +  4  +  2  +  1  +  8  +  6  +  8  _  35 
40  ~  40' 


4(50)  = 


*4(50) 

50 


50 


5(1)  +  2(2)  +  2(4)  +  2(2)  +  2(1)  +  8  +  6  +  8_45 
50  ~  50  ' 
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The  rate-monotonic  workload  analysis  schedulability  test  can  then  be  applied. 


Z8  =minZg(7)<l, 

«eSg 

.  [32  33  34  35  45] 

_ mm[To^’ 20 ’ 30 ’ 40 ’ 50j  ~  ’ 

=  —  <  1. 

40 


Since  the  workload  analysis  schedulability  test  inequality  is  satisfied,  the  eighth  task  of  the 
generic  avionics  mission  system  is  schedulable.  Repeating  the  workload  analysis 
calculations  for  the  ninth,  tenth  and  eleventh  tasks  produces  the  schedulability  test  results 


Lq=^<l, 


Ao  — 


L,,  = 


80 

100 

100 

103 

100 


< 1 , and 


<1. 


The  rate-monotonic  workload  analysis  schedulability  test  inequality  is  satisfied  for  the 
ninth  and  tenth  generic  avionics  mission  system  tasks,  and  these  tasks  are  schedulable. 
The  eleventh  task  does  not  satisfy  the  schedulability  test  inequality,  and  is  not  schedulable 
under  the  rate-monotonic  algorithm.  It  is  interesting  to  note  that  the  sufficient  condition 
established  by  the  basic  rate  monotonic  scheduling  test  could  only  guarantee  that  the 
seven  highest  priority  tasks  could  be  scheduled,  achieving  a  processor  utilisation  of  0.  605, 
when  in  fact  ten  tasks  could  be  scheduled,  achieving  a  total  processor  utilisation  of  0.  91. 
For  these  ten  generic  avionics  mission  system  tasks  the  rate-monotonic  algorithm  performs 
well  above  the  theoretical  worst-case  utilisation  limit  for  ten  tasks  of  0.  718. 


Plotting  a  rate-monotonic  scheduling  of  the  task  set  illustrates  the  behaviours  of  the 
rate-monotonic  algorithm  that  lead  to  tasks  missing  their  deadlines.  Figure  1  shows  such  a 
scheduling  for  a  period  of  400  ms,  which  spans  the  largest  deadline  of  the  task  set  and  is 
sufficient  to  illustrate  the  types  of  schedule  failures  that  occur.  In  Figure  1,  task  rates,  and 
hence  priorities,  are  greatest  at  the  bottom  of  the  figure  and  decrease  monotonically 
towards  the  top  of  the  figure,  with  the  idle  pseudo-task  being  an  indication  of  when  the 
processor  enters  an  idle  state  with  no  task  to  execute. 
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Figure  1.  Rate-monotonic  scheduling  of  the  generic  avionics  mission  system  tasks 

The  ten  highest  priority  tasks  can  be  seen  to  be  scheduled  correctly,  meeting  their 
execution  deadlines  in  every  period.  These  tasks  have  periods  from  10  ms  up  to  100  ms. 
The  Threat  response  display  task  also  has  a  period  of  100  ms,  but  is  not  able  to  run  in  the  first 
100  ms  and  hence  misses  its  first  deadline.  This  illustrates  a  property  of  rate-monotonic 
scheduling,  whereby  lower  priority  tasks  miss  their  deadlines  under  overload  conditions, 
but  a  schedulable  subset  of  higher  priority  tasks  will  always  meet  their  deadlines.  This 
property  gives  the  algorithm  a  desirable  stability  under  transient  overload  conditions, 
making  it  possible  to  predict  which  tasks  will  not  meet  their  deadlines. 

The  mechanism  by  which  the  algorithm  fails  is  also  easily  seen  in  Figure  1.  Note  how 
during  the  first  100  ms  period  for  the  Tlrreat  response  display  task  there  are  always  higher 
priority  tasks  ready  to  run,  causing  it  to  miss  its  deadline.  The  fixed  task  priorities  allow 
the  40  ms  period  tasks  to  run  for  a  third  time,  and  the  80  ms  period  task  to  run  for  a  second 
time,  before  the  100  ms  period  Threat  response  display  task  is  eligible  to  run.  This  results  in 
these  higher  priority  tasks  completing  earlier  than  necessary,  with  the  consequence  that 
the  lower  priority  Threat  response  display  task  cannot  be  executed  before  its  deadline.  This 
characteristic  leads  to  the  need  to  limit  processor  utilisation  to  successfully  employ 
rate-monotonic  scheduling. 
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3.1.3  Response  Time  Analysis 

Response  time  analysis  is  applicable  to  any  fixed  priority  scheduling  algorithm,  and  will 
be  used  to  analyse  a  deadline-monotonic  scheduling  of  the  generic  avionics  mission 
system  tasks.  Deadline-monotonic  scheduling  is  a  fixed  priority  scheduling  algorithm  that 
assigns  task  priorities  on  a  monotonic  ordering  of  task  deadlines.  When  task  deadlines  are 
equal  to  task  periods,  this  priority  assignment  is  equivalent  to  rate-monotonic 
prioritisation.  The  advantage  of  this  algorithm  is  that  it  allows  task  deadlines  to  be  less 
than  or  equal  to  task  periods  [4],  and  the  generic  avionics  mission  system  tasks  can  be 
analysed  without  any  variation  to  the  task  set  specifications. 

Response  time  analysis  of  deadline-monotonic  fixed  priority  scheduling  uses  calculations 
of  worst-case  response  times  to  determine  if  tasks  are  executed  before  their  deadlines. 
Applying  response  time  calculations  as  described  by  Tindell  [5],  response  time  Rt  for 
generic  avionics  mission  system  task  i,  comprises  a  task  computation  time  C; ,  and  an 
interference  time  /1  where  task  execution  is  preempted  by  higher  priority  tasks. 


R,  =  C,  +  /, 


Interference  times  are  bounded  by  the  number  of  occasions  that  higher  priority  tasks  can 
run  during  the  response  time  of  a  task.  Considering  tasks  to  be  ordered  by  priority,  with 
task  1  having  the  highest  priority,  the  interference  experienced  by  task  i  can  be  stated  as 


i-i 


'.=1 

7=1 


R, 


C, 


This  leads  to  an  expression  for  the  response  time  of  task  i, 


*,=c,  +  £ 

7=1 


i? 


CJ’ 


that  can  be  seen  to  contain  the  response  time  on  the  left-hand  side  and  right-hand  side. 
Solution  is  by  formation  of  the  response  time  recurrence  relation. 


i-l 


R 


m+ 1 


7=1 


RT 


Cj' 


in  which  an  initial  value  of  zero  for  R’"  is  suitable  for  the  relation  to  converge  to  the 

smallest  response  time  value  that  satisfies  the  response  time  expression.  After  iterating 
over  the  response  time  recurrence  relation  until  it  converges,  task  schedulability  is  tested 
by  comparing  the  worst-case  response  time  to  the  task  deadline. 
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R,.<Di. 

Applying  the  response  time  recurrence  relation  to  the  generic  avionics  mission  system,  the 
response  time  for  the  highest  priority  task,  task  1,  has  no  interference  from  higher  priority 
tasks  and  is  given  by 

^=Q=1. 

Schedulability  for  task  1  is  determined  by  testing  that  the  response  time  is  less  than  the 
deadline  for  the  task. 


Rl  =  1  <  A  =  5 . 


Response  time  for  task  2  includes  interference  due  to  preemption  by  task  1, 


r'2=c,+± 


7=1 


r: 


C,=  2  +  0(1)  =  2, 


r22=c2+y, 


7=1 


Rl 


C,  =2  +  1(1)  =  3, 


+  =c,+X 


7=1 


/C 


c  =2  +  1(1)  =  3. 


Comparing  task  2  response  time  to  task  2  deadline, 

R2  =  3  <D2=  40, 


task  2  response  time  is  less  than  its  deadline  and  task  2  is  schedulable.  Continuing  to 
determine  response  times  for  tasks  yields  the  following  tests  for  schedulability. 


R3=7<D3=  40, 

R5  =10  <D5  =40, 

R7  =  26  <  D7  =  50, 

Rg  =  76  <  D9  =  80, 

Rn  =  146  <  Dn  =100. 


R4  =  9  <  D4  =  40, 

i?6=19<JD6=50, 

Rs  =35  <  Ds  =  50, 

Rw  =100  <DW  =100, 


The  response  time  for  the  eleventh  task  is  greater  than  its  deadline,  and  it  fails  the 
response  time  schedulability  test.  This  result  is  in  agreement  with  the  rate-monotonic 
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workload  analysis  schedulability  test,  which  also  found  that  the  eleventh  task  was  not 
schedulable.  Response  time  schedulability  analysis  provides  an  advantage  over  workload 
analysis  schedulability  testing,  in  that  it  is  able  to  quantify  the  extent  by  which  a  task  will 
miss  its  deadline. 

3.2  Non-Preemptive  Fixed  Priority  Scheduling 

Non-preemptive  fixed  priority  scheduling  avoids  the  usage  of  task  preemptions  by 
selecting  the  highest  priority  task  ready  for  execution  at  the  completion  of  the  current  task. 
This  algorithm  simplifies  scheduler  design,  but  increases  response  times  for  high  priority 
tasks,  which  would  otherwise  benefit  from  being  able  to  preempt  lower  priority  tasks.  For 
the  task  set  of  the  generic  avionics  mission  system,  non-preemptive  fixed  priority 
scheduling  is  clearly  unable  to  succeed,  since  there  exist  tasks  with  execution  times  longer 
than  the  deadline  for  the  Weapon  release  task,  which  can  delay  this  task  past  its  deadline. 
Analysis  by  a  simple  but  pessimistic  schedulability  test  is  shown  in  §3.2.1,  and  by  a  less 
pessimistic  schedulability  test  in  §3.2.2. 

3.2.1  Simple  Non-Preemptive  Response  Time  Test 

Non-preemptive  fixed  priority  scheduling  can  be  considered  to  be  a  special  case  of 
preemptive  scheduling,  where  lower  priority  tasks  can  block  the  execution  of  higher 
priority  tasks  until  the  lower  priority  task  completes  its  execution  [6]. 

Fidge  [6]  presents  a  response  time  calculation  that  incorporates  non-preemptive  blocking 
of  higher  priority  tasks  by  lower  priority  tasks,  where  response  time  R: ,  for  task  i,  is 
calculated  in  terms  of  computation  time  C, ,  blocking  time  Bt  and  interference  from 
higher  priority  tasks  /, .  This  can  be  expressed  as 

Ri=Ci+Bi+Ii, 

where  Bt  can  be  replaced  by  the  maximum  computation  time  of  any  lower  priority  task, 
and  /,  can  be  replaced  by  a  sum  of  all  possible  interference  during  the  response  time, 
giving 


i-i 

R  =  C,  +  max  C,.  +  V 

i+l<k<n  k  *—1 


j=  1 


R: 


c. 


The  interference  term  is  pessimistic  since  it  assumes  that  preemption  can  occur,  but  is  still 
useful  to  provide  a  simple  schedulability  test.  Applying  to  task  1  of  the  generic  avionics 
mission  system  task  set, 

R,  =  C.  +  max  C,  =1  +  8  =  9, 

2<k<l5 
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and  applying  the  response  time  schedulability  test 
Rl=9<Dl=5, 


the  response  time  exceeds  the  deadline  and  task  1  is  not  found  to  be  schedulable  by  the 
non-preemptive  fixed  priority  algorithm.  Testing  for  schedulability  of  task  2  requires 
iteration  over  the  response  time  recurrence  relation  until  it  converges. 


i?2°=0, 

R\  =Cj  +  max  C,  =  2  +  8  =  10, 

2  3<*<15  * 


Rl  =  C,  +  max  C,  +  V 

2  2  3<A<15  k  *r! 

J= 1 

1 

R ~  =  C7  +  max  C,  +  V 

2  2  3<*<15  1 

7=1 

1 

£,4  =  C2  +  max  C.  +  V 

2  2  3<*<15  k 


7=1 


R\ 


R; 


R 


c.  =2  +  8  +  1  =  11, 


C,  =  2  +  8  +  2(1)  =  12, 


C,  =  2  +  8  +  2(1)  =  12. 


Applying  the  response  time  schedulability  test  for  task  2, 
R2  =  12  <  D2  =  40, 


the  response  time  does  not  exceed  the  deadline  and  the  task  is  schedulable  by  the 
non-preemptive  fixed  priority  algorithm.  Similarly  determining  response  times  and 
applying  the  response  time  schedulability  test  for  the  remaining  generic  avionics  mission 
system  tasks. 


R3  =16  <Z)3  =40, 

R5  =19  <D5  =40, 

R7  =  35  <  D7  =  50, 

R9  =94  <D9=  80, 

Rn  =194  <Dn  =100, 
Ru  =  200  <  Dn  =  200, 
Rt<  =393  <  As  =400. 


R4  =18<£)4  =40, 

R6  =28<£)6  =50, 

Rs  =  68  <  £>8  =  50, 
£10=142  <2^=100, 
Rl2  =198  <Dn  =200, 
£14  =  393  <  Du  =  400, 


Due  to  the  pessimistic  interference  value  used  in  the  construction  of  this  test,  these  results 
indicate  that  only  tasks  2, 3, 4, 5, 6, 7, 12, 13, 14  and  15  can  be  successfully  scheduled  by  the 
non-preemptive  fixed  priority  algorithm.  Task  8  is  also  schedulable,  as  can  be  determined 
by  the  following  test. 
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3.2.2  Non-Preemptive  Response  Time  Test 

A  less  pessimistic  schedulability  test  can  be  constructed  by  disallowing  preemption  of 
interfering  tasks,  as  described  by  Fidge  [6],  Consider  task  response  time  R:  to  consist  of  a 
computation  time  C,  and  a  release  time  r , 


R  =  C,  +  r . 


Release  time  will  comprise  a  worst-case  blocking  time  from  a  lower  priority  task  and 
interference  from  non-preemptive  arrivals  of  higher  priority  tasks, 

r,  =Bi+Ii, 


i-i  f 

ri 

T 

\ 

r.  =  max  C,.  +  V 

'  i+l<k<n  k 

+  1 

J=1  V 

\_  j  _ 

J 

Solution  of  release  time  is  by  formation  of  a  recurrence  relation. 


r'"+l  =  max 

i+\<k<n 


c,+Z 

j= i 


f 

rm 

X 

'  i 

T. 

+  1 

VL  J  _ 

) 

cr 


Release  time  for  task  1  of  the  generic  avionics  mission  system  task  set  is  found  through 
solution  of  the  recurrence  relation. 


b°=  o, 

r!  =  max  C,.  =8. 

1  2<A-<15 


Response  time  for  task  1  can  then  be  determined  and  the  response  time  schedulability  test 
applied, 

=  Cj  +  q  =1  +  8  =  9, 

Rl=9<Dl=5. 

The  response  time  for  task  1  fails  to  satisfy  the  response  time  test  inequality,  so  task  1  is 
not  found  to  meet  its  deadline  under  the  non-preemptive  fixed  priority  algorithm. 

Performing  the  calculations  for  task  2, 

r2°=0, 
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=  max 

3<*<15 


=  max 

3<A-<15 


c,+Z 

j= 1 

Q+Z 


j= 1 


(  0 

\ 

r2 

+  1 

11+ J 

) 

f  i 

\ 

r\ 

+  1 

11+ . 

y 

Cj  =8  +  1  = 

Cj  =  8  + 1  = 


9, 

9, 


R-,  —  C2  +  —  2  +  9  —  11, 


f?2  =  1 1  <  £>2  =  40, 


task  2  satisfies  the  response  time  schedulability  test,  and  will  always  meet  its  deadline. 

Repeating  the  calculations  for  task  3, 

r3°=0, 


/-,  =  max 

4<A<15 


=  max 

4<A-<15 


r,  =  max 

4<A<15 


+  +£ 

j= i 

Ck+± 

j= i 

c,+t 


y=i 


(  0 

\ 

+  1 

l+J 

) 

(  i 

\ 

^3 

+  1 

lLr>. 

J 

(  V2 

\ 

r3 

+  1 

ll : T>. 

) 

c. 


=  8  +  1  +  2  =  11, 

=  8  +  2(1)  +  2  =  12, 
=  8  +  2(1)  +  2  =  12, 


—  C3  +^3  —  4  +  12  —  16, 
R3  =16  <D3  =40, 


task  3  also  satisfies  the  response  time  schedulability  test.  Response  time  tests  for  the 
remaining  generic  avionics  mission  system  tasks  have  been  determined  as  follows. 


R4  =18  <D4  =40, 
R6=21<D6=50, 

Rs  =42  <  Dg  =  50, 

Rl0  =  106  <  D10  =100, 
Ru  =198  <Dn  =200, 
Ru  =  205  <  Du  =  400, 


Rs  =19  <D5  =40, 

=  34  <  D7  =  50, 
R9=S3<D9=  80, 

Rn  =  152  <  Dn  =100, 
Ru  =  200  <  Dn  =  200, 
f?15  =  390  <  Dl5  =  400. 


This  response  time  schedulability  test  indicates  that  tasks  2, 3, 4, 5, 6,  7, 8, 12, 13, 14  and  15 
will  always  meet  their  deadlines  under  the  non-preemptive  fixed  priority  algorithm. 
Figure  2  shows  the  higher  levels  of  jitter  that  this  algorithm  introduces  for  high  priority 
tasks,  causing  the  Weapon  release  task  to  miss  its  deadline,  while  similarity  to  the 
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rate-monotonic  and  deadline-monotonic  algorithms  is  evident  in  the  manner  in  which  the 
unschedulable  tasks  miss  their  deadlines. 
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Figure  2.  N on-preemptive  fixed  priority  scheduling  of  generic  avionics  mission  system  tasks 

3.3  Asynchronous  Fixed  Priority  Scheduling 

Synchronous  fixed  priority  scheduling  of  independent  tasks  assumes  simultaneous 
arrivals  of  all  tasks  at  time  zero,  providing  a  critical  instant  [2]  from  where  all  tasks  will 
experience  their  worst  case  response  times.  Analysis  of  synchronous  systems  by  Liu  and 
Layland  [2]  found  that  processor  utilisation  needed  to  be  bounded  to  ensure  that  task 
deadlines  would  be  met  for  task  arrivals  at  critical  instants. 

Asynchronous  fixed  priority  scheduling  does  not  require  tasks  with  independent 
execution  timing  to  have  simultaneous  arrivals  at  time  zero,  allowing  the  first  arrival  of  a 
task  to  be  delayed  by  an  arbitrary  phase  offset.  Tasks  that  have  a  harmonic  relationship  in 
their  invocation  periods  will  maintain  a  predictable  phase  relationship  between  their 
arrival  times,  which  can  reduce  the  number  of  tasks  having  simultaneous  arrivals,  and 
allow  a  higher  level  of  processor  utilisation. 

A  sufficient  and  necessary  schedulability  analysis  for  asynchronous  systems  has  been 
reported  by  Tindell  [7],  using  a  concept  of  transactions  containing  tasks  with  related 
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timings,  but  is  computationally  infeasible  for  non-trivial  problems  [7],  Leung  and 
Whitehead  [8]  have  studied  the  complexity  of  asynchronous  scheduling,  and  prove  that  if 
the  schedulability  of  an  identified  partial  schedule  is  determined,  then  the  schedulability 
of  the  system  for  all  time  is  proved.  The  length  of  the  partial  schedule  is  given  by  twice  the 
lowest  common  multiple  of  all  task  periods,  which  has  a  worst  case  exponential 
complexity,  and  may  result  in  analysis  not  being  computationally  feasible  for  systems  with 
large  numbers  of  tasks  with  relatively  prime  periods. 

A  phase  offset  specification  can  be  added  to  tasks  of  the  generic  avionics  mission  system  as 
shown  in  Table  2.  Tasks  retain  a  deadline-monotonic  task  prioritisation,  while  selection  of 
phase  offsets  has  been  made  to  evenly  distribute  the  arrival  times  of  tasks  of  equal 
periodicity. 


Table  2.  Generic  avionics  mission  system  tasks  with  phase  offsets 


Task  Name 

Computation  Time 
(ms) 

Phase  Offset 
(ms) 

Period  (ms) 

Deadline  (ms) 

Weapon  release 

1 

0 

10 

5 

Radar  tracking 

2 

0 

40 

Target  tracking 

4 

10 

40 

Target  sweetening 

2 

20 

40 

HOT  AS  bomb  button 

1 

30 

40 

Aircraft  flight  data 

8 

0 

50  (55) 

HUD  display 

6 

16 

50  (52) 

MPD  tactical  display 

8 

32 

50  (52) 

Steering 

6 

20 

80 

Weapon  trajectory 

7 

0 

100 

Threat  response  display 

3 

50 

100 

AUTO/CCIP  toggle 

1 

0 

200 

Poll  RWR 

2 

100 

200 

Reinitiate  trajectory 

6 

0 

400 

Periodic  BIT 

5 

0 

1000 

400 

Analysis  of  asynchronous  task  set  schedulability  is  by  application  of  the  fixed  priority 
scheduling  algorithm  for  a  time  period  spanning  the  Leung  and  Whitehead  partial 
schedule  [8],  which  starts  at  the  largest  phase  offset  value.  Schedule  start-up  at  time  zero 
represents  atypical  behaviour  since  phase-shifted  tasks  are  only  scheduled  for  their  first 
execution  after  their  phase  offset  delay,  and  has  been  included  in  the  analysis  even  though 
it  is  outside  of  the  required  partial  schedule.  Note  that  if  all  task  periods  were  relatively 
prime,  schedulability  would  revert  to  the  case  of  synchronous  tasks,  since  synchronous 
arrival  of  all  tasks  would  occur  somewhere  within  the  partial  schedule. 

Schedulability  analysis  of  the  asynchronous  task  set  involves  a  lengthy  sequence  of 
calculations,  which  will  be  developed  into  an  iterative  algorithm.  To  assist  with 
algorithmic  expression  of  the  schedulability  analysis,  vectors  and  matrices  are  used  for  a 
number  of  calculation  variables.  The  variable  n  =  15  is  used  to  refer  to  the  number  of 
tasks,  and  the  variable  m  is  used  as  a  local  variable  indicating  the  number  of  rows  in  a 
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matrix  or  column  vector.  Generic  avionics  mission  system  task  periods,  computation 
times,  and  phase  offsets  are  assigned  to  vectors 


~  10  ' 

'll 

"  0  " 

40 

2 

0 

40 

4 

10 

40 

2 

20 

40 

1 

30 

50 

8 

0 

50 

6 

16 

50 

,  c  = 

8 

,  and  P  = 

32 

80 

6 

20 

100 

7 

0 

100 

3 

50 

200 

1 

0 

200 

2 

100 

400 

6 

0 

1000_ 

5 

0 

The  test  period  to  be  considered  in  the  analysis  will  be  the  Leung  and  Whitehead  partial 
schedule  [8],  expanded  to  begin  at  time  zero.  The  end  point  of  the  partial  schedule  is  the 
largest  phase  offset  delay  plus  twice  the  lowest  common  multiple  of  all  task  periods, 
giving  a  test  period  Tt  of 


T.  =  ma xP,  +  2*  lcm(71 , . . . ,  T  )  =  100  +  2  *  2000  =  4100  ms. 

1  <i<n 

Task  arrival  times  are  calculated  for  the  complete  test  period,  giving  a  set  of  arrival  times 
for  each  generic  avionics  mission  system  task,  using 


[ 

'Tt-P,' 

1 

4=< 

KT.+P, 

ii 

a 

pi¬ 

ll 

© 

" 

T, 

which  produces  the  sets 

A,  =  {0,10,. ..,4090}, 

A,  =  {10,50,..., 4090}, 
As  ={30,70,..., 4070}, 


A2  ={  0,40,..., 4080}, 
A4  =  {  20, 60,..., 4060}, 
A6  =  {  0,50,..., 4050}, 
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A1  ={  16, 66,..., 4066}, 

Ag  ={20,100,.  ..,4020}, 

An  ={50,150,. ..,4050}, 

Al3  ={100,300,..., 3900}, 

A15  ={0,1000,2000,3000,4000}. 


A8  ={32,82,  ...,4082}, 
Aw  ={  0,100,..., 4000}, 
Au  ={0,200,..., 4000}, 
Au  ={0,400,..., 4000}, 


The  union  of  individual  task  arrival  time  sets  creates  a  set  A ,  containing  all  task  arrival 
times  in  the  test  period, 

n 

A  =  U  4  =  {  0,10,. . .  ,4090}U  {16,66, . . .  ,4066}  U  {32,82, . . .  ,4082}. 

i=i 

Task  response  times  are  calculated  by  first  allocating  arrived  tasks  to  a  service  queue,  from 
where  tasks  receive  service  in  priority  order.  Task  servicing  may  be  preempted  by  arrival 
and  servicing  of  higher  priority  tasks.  Task  response  times  are  calculated  as  the  elapsed 
time  between  task  arrival  and  the  completion  of  task  service.  Response  times  will  vary 
according  to  the  relative  phasings  of  tasks,  and  the  maximum  task  response  time  occurring 
in  the  test  period  provides  the  worst-case  response  time  measurement  used  to  determine 
schedulability  for  a  task. 

An  array  S  is  used  to  represent  the  task  service  queue.  Each  row  of  this  array  holds  five 
parameters  for  a  task  awaiting  service:  task  priority;  task  arrival  time;  task  completion 
time;  task  response  time  and  task  computation  time.  Task  service  queue  S  is  maintained 
in  priority  order  by  inserting  newly  arrived  tasks  after  queued  tasks  of  equal  or  higher 
priority.  Row  1  of  S  represents  the  head  of  the  service  queue  and  contains  parameters  for 
the  task  to  be  serviced.  On  completion  of  task  service,  task  parameter  information  is 
deleted  from  the  head  of  service  queue  S ,  and  is  appended  to  the  end  of  array  F ,  which 
is  used  to  store  parameters  of  tasks  that  have  completed  service.  Array  F  will  contain 
parameters  for  all  completed  tasks,  ordered  by  task  completion  times. 

A  schedule  time  is  maintained  in  variable  t ,  and  the  time  step  that  has  occurred  from  the 
preceding  calculation  is  maintained  in  variable  dt .  Initially,  t  =  0  and  dt  =  0  at  the 
commencement  of  analysis.  The  task  service  queue  and  completed  task  array  are  initially 
empty,  S  =  [  ]  and  F  =  [  ] .  Iterative  calculations  are  needed  to  analyse  scheduling 
behaviour  for  the  entire  test  period,  and  are  introduced  through  analysis  of  schedule 
behaviour  for  the  first  10  ms  of  schedule  execution.  An  iterative  algorithm  is  then 
presented  that  can  perform  the  analysis  for  the  complete  test  period.  To  support  algorithm 
development,  an  assignment  operator  :=  is  used  to  indicate  that  a  variable  is  assigned  a 
new  value,  which  may  recursively  depend  on  the  current  value  of  the  variable. 

At  commencement  of  schedule  analysis,  S  =  [  ]  and  there  is  no  queued  task  awaiting 
service.  Schedule  time  t  =  0 ,  and  existence  of  an  element  0  e  A  indicates  that  task  arrivals 
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occur.  Element  0  is  removed  from  A ,  leaving  A  to  contain  only  task  arrival  times  not  yet 
reached, 

A  :=  A  -  { 0}  :=  { 10,20, . . .  ,4090}  U  { 16,66, . . .  ,4066}U  { 32,82, . . .  ,4082}. 


Tasks  Weapon  release,  Radar  tracking,  Aircraft  flight  data,  Weapon  trajectory,  AUTO/CC1P 
toggle,  Reinitiate  trajectory  and  Periodic  BIT  arrive  at  time  t  =  0 .  Arriving  tasks  need  to  be 
queued  in  task  service  queue  S  according  to  task  priorities,  and  this  operation  is  assisted 
by  defining  a  function 


enqueue(S,Ai,p,a,c,r,d)  = 
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Applying  function  enqueue  to  assign  arriving  task  information  to  the  task  service  queue 

5, 
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S  :=  { enqueue^,  At ,  i,  t,  0,0,  C, )  ,i  =  \,...,n 
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Function  enqueue  inserts  task  parameters  into  the  task  service  queue  S ,  for  each  of  the 
seven  arriving  tasks.  Tasks  are  inserted  in  order  of  priorities  as  indicated  by  column  1  of 
S .  Column  2  contains  task  arrival  times,  which  are  all  zero  for  the  seven  arrived  tasks. 
Columns  3  and  4  hold  task  completion  times  and  response  times  that  are  not  yet  known, 
and  are  zeroed  until  determined.  Column  5  holds  the  remaining  computation  times 
needed  to  complete  the  tasks,  initially  set  equal  to  task  computation  times  for  arriving 
tasks. 


Schedule  time  can  be  advanced  to  the  next  task  arrival  time  or  completion  of  task  service, 
whichever  occurs  first.  The  time  step  for  this  advancement  is  given  by 


dt 


min(yf)  - 1 

=  '  ^(l)(5) 

min(yf)  - 1 

=  ^(l)(5) 

=  1, 


.S  =  [] 

,t  +  Sim)  <  min(yf) 
’*  +  5(iXs) 


and  schedule  time  is  advanced  to 


t  t  +  dt  0  + 1 1 . 


The  priority  1  Weapon  release  task  at  the  head  of  task  service  queue  S  completes  at  t  =  1 , 
and  requires  its  parameter  data  fields  to  be  updated.  This  task  may  then  be  removed  from 
the  service  queue  and  placed  into  the  empty  completed  task  array  F .  Updating  task 
completion  time,  response  time  and  computation  time  fields, 

c 

°(1)(3) 

C 

°<D(4) 

^(1)(5) 


=  t  =  \, 

-  C  _  C  —  1 

a(l)(3)  °(1)(2) 

=  0. 
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Copying  task  parameter  data  into  the  completed  task  array  F  ,  and  removing  it  from  the 
task  service  queue. 
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Six  tasks  remain  in  the  service  queue,  and  schedule  time  can  again  be  advanced  to  the  next 
task  arrival  time  or  completion  of  task  service.  The  time  step  for  this  advancement  is  given 
by 


dt 


min(yf)  - 1 

=  '  ^(l)(5) 

min(yf)  - 1 
-  c 

Jd)(5) 

=  2, 


•Ml 

,t  +  Sm5)  <  min(yl) 
d  +  S{ i)(5)  >  min(yl) 


and  schedule  time  is  advanced  to 
t  ;=  t  +  dt  ;=  1  +  2  :=  3 . 


The  priority  2  Radar  tracking  task  completes  at  t  =  3 ,  and  requires  its  parameter  data  fields 
to  be  updated  in  task  service  queue  5* .  This  task  may  then  be  removed  from  the  service 
queue  and  be  appended  to  the  completed  task  array  F  .  Updating  task  completion  time, 
response  time  and  computation  time  fields, 

£(1)(3)  =  f  =  3, 

9  —  V  _  C  _T_n_7! 

1J(l)(4)  lj(l)(3)  ‘J(l)(2)  J  J  > 

£(1X5)  =  0  ‘ 

Copying  task  parameter  data  into  the  completed  task  array  F  and  removing  it  from  the 
task  service  queue. 
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S:= 


9  9  9  9  9 

°(2)(1)  J(2)(2)  J(2)(3)  °(2)(4)  J(2)(5) 


9  9  9  9  9 

J(6)(l)  J(6)(2)  J(6)(3)  J(6)(4)  °(6)<5) 


6  0  0  0  8 

10  0  0  0  7 

12  0  0  0  1 

14  0  0  0  6 

15  0  0  0  5 


Five  tasks  remain  in  the  service  queue,  and  schedule  time  is  again  advanced  to  the  next 
task  arrival  time  or  completion  of  task  service.  The  time  step  for  this  advancement  is  given 
by 


dt 


min(d)  - 1 

=  '  ^(l)(5) 

min(d)  - 1 
=  min(d)  - 1 
=  10-3 


•  5  =  [] 

,t  +  Sm5)  <  min(d) 
d  +  S{  1X5)  >  min(d) 


=  7, 


and  schedule  time  is  advanced  to 
t  ;=  t  +  dt  ;=  3  +  7  ;=  1 0 . 


The  priority  1  Weapon  release  task  and  priority  3  Target  tracking  task  arrive  at  t  =  10 ,  and 
will  both  preempt  the  incomplete  priority  6  Aircraft  flight  data  task.  Element  1 0  is  removed 
from  the  set  of  all  arrival  times  A ,  leaving  A  to  contain  only  task  arrival  times  not  yet 
reached, 

A  :=  A  -  { 10}  :=  { 20,30, . . .  ,4090}U  { 16,66, . . .  ,4066}U  { 32,82, . . .  ,4082}. 


The  incomplete  Aircraft  flight  data  task  must  have  its  outstanding  computation  time 
requirements  updated  in  the  task  service  queue  S , 

*^(i)(5)  -=  *^(i)(5)  ~dt  .=  8  —  7  .=  1 . 

Arriving  tasks  Weapon  release  and  Target  tracking  can  then  be  inserted  into  the  task  service 
queue  S , 
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S  :=  { enqueue^,  At ,  i,  t,  0,0,  C,. )  ,i  =  \,...,n 
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Schedule  time  can  again  be  advanced,  task  parameter  data  fields  be  updated,  completed 
tasks  be  moved  from  the  service  queue  to  the  completed  tasks  array,  and  arriving  tasks  be 
enqueued  for  service  in  priority  order,  until  all  task  arrivals  for  the  test  period  have  been 
serviced.  On  completion  of  servicing  of  all  task  arrivals,  the  completed  task  array  F  will 
contain  response  time  data  for  every  task  execution.  Worst-case  response  times  for  each 
generic  avionics  mission  system  task  are  found  by  identifying  the  maximum  task  response 
times  for  the  test  period, 

Ri  :=  max{F(y.)(4) \j  =  l,..., m ; F(/)(1)  =  /}. 


An  algorithmic  expression  describing  the  complete  schedulability  test  calculation  is 
presented  in  Figure  3,  in  terms  of  the  variables,  functions  and  data  structures  already 
introduced.  This  algorithm  has  been  used  to  complete  the  evaluation  of  worst-case 
response  times.  Applying  the  response  time  schedulability  test  for  each  task. 


R{  =  1  <  Dl  =  5 , 

R4  =  3  <  D4  =  40 , 

R7  =  1 1  <  D7  =  50 , 
Rl0  =  75  <  Dw  =100, 
Rn  =  80  <  Dn  =  200 , 


R2  =  3  <  D2  =  40 , 

R5  =  2  <  D5  =  40 , 

R8  =14<£>8  =50, 

Rn  =49  <DU  =100, 
Ru  =  200  <  Du  =  400 


R2=5<D2  =40, 

R6  =\6<D6  =50, 

Rg  =28  <D9  =80, 

Ru  =79  <  Dl2  =  200 , 
R15  =  300  <  Z)15  =  400 
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Figure  3  Asynchronous  fixed  priority  schedulability  test  algorithm 

The  schedulability  test  reveals  that  no  tasks  exceed  their  deadlines  for  the  asynchronous 
fixed  priority  scheduling  of  generic  avionics  mission  system  tasks,  producing  a  fixed 
priority  scheduling  solution  that  was  unachievable  by  synchronous  fixed  priority 
scheduling.  The  superior  performance  of  asynchronous  scheduling  over  synchronous 
scheduling  results  when  the  selected  task  phasings  avoid  simultaneous  arrivals  of  all  tasks 
and  more  evenly  spread  task  arrivals  to  eliminate  loading  peaks  that  restrict  processor 
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utilisation.  Figure  4  shows  an  asynchronous  fixed  priority  scheduling  of  the  generic 
avionics  mission  system  tasks  for  a  period  of  400  ms. 


idle 

r 

Periodic  BIT 

_n 

i 

L_ 

Reinitiate  trajectory 

n 

J 

Roll  RWR 

JL 

1 

u 

L 

AUTO/CCIP  toggle 

jL 

i 

Threat  response  display 

jL 

M 

1 

± 

j 

Weapon  trajectory 

n  n 

LL 

n 

n 

JU1 

Steering 

_n 

1 

n  n 

n 

n 

dd 

X 

MPD  tactical  display 

n_ 

In 

i  nn 

_n 

L 

n 

m 

_niu_ 

m 

HUD  display 

n 

n 

ii 

nn 

n 

ji _ 

_ RJL 

ILL 

J1L 

_n 

X 

Aircraft  flight  data 

n 

1 

_n/L 

_ni 

n_ 

Hi 

-\M-\ 

JJ 

n 

HOTAS  bomb  button 

i 

i 

i  i 

i 

i 

L 

L 

HI 

1 

i 

L 

Target  sw  eetening 

L 

Ini 

n  o 

LL 

L 

n 

L 

L 

Target  tracking 

n_ 

n 

n  n 

n 

n 

_u 

n 

n_ 

Radar  tracking 

L 

_JL 

Ii 

_JL 

n 

n 

Id 

L 

Weapon  release 

U 

u 

U 

LU 

LJU 

LJU 

I'M 

JU 

LJU 

l_l 

‘III 

u 

i  i  ii  i 

LJU 

U 

LJU 

nil 

u 

u 

L 

u 

0  50  100  150  200  250  300  350  400 


Figure  4.  Asynchronous  fixed  priority  scheduling  of  the  generic  avionics  mission  system  tasks 

3.4  Dynamic  Priority  Scheduling 

The  earliest-deadline-first  dynamic  priority  scheduling  algorithm  provides  an  optimal 
scheduling  solution  where  the  use  of  dynamic  task  priorities  is  acceptable  [2],  This 
algorithm  preemptively  selects  the  task  to  be  run  on  the  criteria  of  the  task  having  the 
smallest  time  remaining  until  its  execution  deadline,  and  is  able  to  fully  utilise  processor 
capacity.  Implementation  of  this  algorithm  involves  higher  scheduler  overheads  than  fixed 
priority  scheduling  algorithms,  due  to  the  need  to  dynamically  calculate  task  priorities 
before  queueing  tasks  for  execution. 

To  satisfy  the  assumptions  needed  to  apply  the  schedulability  test  derived  by  Liu  and 
Layland  [2],  it  will  be  assumed  that  the  deadline  for  the  Weapon  release  task  is  10  ms,  and 
that  the  deadline  for  the  Periodic  BIT  task  is  1000  ms.  Schedulability  analysis  is 
straightforward,  requiring  only  a  test  of  processor  utilisation,  since  the  algorithm  is  only 
limited  by  processor  capacity.  Calculating  a  processor  utilisation  test  for  the  fifteen  generic 
avionics  mission  system  tasks. 
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z 


C, 

T, 


1  2+4+2+1  8+6+8  6  7+3  1+2  6  5 

To+  40  +  50  +  80  +T00"+  200  +400  +  K)00 


=  0.975  <1, 


the  total  utilisation  of  0.975  does  not  exceed  processor  capacity  and  the  tasks  are 
schedulable  by  the  earliest-deadline-first  algorithm.  Figure  5  shows  a  plot  of  an 
earliest-deadline-first  scheduling  of  the  generic  avionics  mission  system  tasks.  It  can  be 
seen  that  this  algorithm  preserves  the  low  jitter  for  high  priority  tasks  that  the 
rate-monotonic  algorithm  produces,  but  does  not  run  tasks  earlier  than  needed  if  this 
would  result  in  another  task  missing  its  deadline.  Idle  processor  time  observable  at  the 
end  of  the  400  ms  period  is  able  to  be  used  without  restriction,  anywhere  in  the  period, 
offering  maximum  flexibility  for  any  additional  processing  added  to  the  task  set.  If  the 
algorithm  was  subjected  to  a  transient  overload  it  is  not  possible  to  predict  which  tasks 
would  miss  their  deadlines. 
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Figure  5.  Earliest-deadline-first  scheduling  of  the  generic  avionics  mission  system  tasks 

3.5  Static  Scheduling 

Statically  determined  schedules  are  used  where  deterministic  operation  is  required,  or 
where  the  run-time  overheads  of  dynamic  scheduling  can  not  be  accommodated.  Use  of  a 
non-preemptive  statically  determined  schedule  eliminates  much  of  the  need  for  a  run-time 
operating  system,  offering  the  highest  possible  levels  of  throughput.  Development  of  the 
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execution  schedule  becomes  a  design  activity  highly  dependent  on  the  execution-time 
performance  of  the  tasks  being  scheduled.  This  leads  to  schedule  design,  implementation 
and  testing  activity  being  required  to  accommodate  any  change  to  any  task  in  the  task  set. 

To  make  a  schedule  design  manageable  it  is  desirable  to  achieve  a  reasonably  small  lowest 
common  multiple  of  all  task  periods,  since  beyond  this  time  the  schedule  is  simply 
repeated.  Best  case  for  design  ease  occurs  when  all  tasks  are  scheduled  at  harmonic 
frequencies,  and  the  period  of  the  schedule  design  equals  the  period  of  the  lowest 
frequency  task.  For  the  generic  avionics  mission  system,  three  tasks  have  had  their  periods 
shortened  to  multiples  of  the  shortest  task  period,  to  reduce  the  period  of  the  schedule 
design.  The  resulting  lowest  common  multiple  for  all  task  periods  was  2000  ms. 
Schedulability  analysis  involves  examining  the  response  time  for  every  task  invocation  in 
the  schedule,  to  identify  the  worst-case  response  time  for  each  task.  Table  3  shows 
worst-case  response  times  for  a  static  scheduling  of  the  generic  avionics  mission  system 
tasks,  and  all  task  response  times  can  be  seen  to  not  exceed  task  deadlines. 


Table  3.  Static  schedule  worst-case  response  times 


Task  Name 

Computation 

Time  (ms) 

Period  (ms) 

Deadline  (ms) 

Response 

Time  (ms) 

Weapon  release 

1 

10 

5 

4 

Radar  tracking 

2 

40 

5 

Target  tracking 

4 

40 

25 

Target  sweetening 

2 

40 

27 

HOT  AS  bomb  button 

1 

40 

35 

Aircraft  flight  data 

8 

50  (55) 

13 

HUD  display 

6 

50  (52) 

22 

MPD  tactical  display 

8 

50  (52) 

33 

Steering 

6 

80 

62 

Weapon  trajectory 

7 

100 

93 

Threat  response  display 

3 

100 

99 

AUTO/CCIP  toggle 

1 

200 

120 

Poll  RWR 

2 

200 

189 

Reinitiate  trajectory 

6 

400 

50 

Periodic  BIT 

5 

1000 

400 

250 

Figure  6  illustrates  the  first  400  ms  of  the  static  schedule,  in  which  jitter  for  the  high  rate 
Weapon  release  task  is  more  pronounced  due  to  the  unavailability  of  preemption.  The  total 
idle  processor  time  remains  the  same  as  for  other  successful  scheduling  algorithms,  but  to 
use  it  at  other  locations  within  the  schedule  requires  redesign  of  the  schedule  and  is  not 
guaranteed  to  be  possible. 
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Figure  6.  A  static  scheduling  of  the  generic  avionics  mission  system  tasks 


4.  Conclusions 


Established  approaches  to  real-time  task  scheduling  have  been  applied  to  a  set  of  generic 
avionics  mission  system  tasks  representative  of  a  heavily  loaded  system.  The  scheduling 
algorithms  have  been  analysed  using  a  range  of  schedulability  analyses,  demonstrating  the 
application  of  the  analyses  and  determining  the  performance  of  the  scheduling  algorithms. 

The  widely  used  fixed  priority  preemptive  scheduling  algorithm  has  been  applied,  and 
three  analysis  methods  have  been  demonstrated.  The  basic  rate-monotonic  schedulability 
test  was  unable  to  confirm  schedulability  for  the  task  set,  this  test  is  only  able  to  confirm 
schedulability  for  less  heavily  loaded  systems.  The  workload  analysis  schedulability  test  is 
always  able  to  determine  schedulability  for  this  scheduling  algorithm,  and  found  that  the 
task  set  cannot  be  successfully  scheduled.  Similarly,  the  response  time  analysis 
schedulability  test  is  always  able  to  determine  schedulability,  and  also  indicates  that  the 
task  set  is  not  schedulable.  The  fixed  priority  algorithm  does  demonstrate  predictable 
performance  when  overloaded,  ensuring  high  priority  tasks  are  completed  in  preference  to 
low  priority  tasks,  but  is  not  suitable  for  the  heavily  loaded  system. 
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Fixed  priority  non-preemptive  scheduling  has  been  subjected  to  two  separate  analyses 
based  on  extensions  of  response  time  analysis.  A  simple  non-preemptive  response  time 
test  found  that  five  tasks  would  miss  their  deadlines,  but  the  results  of  the  test  are 
pessimistic.  A  less  pessimistic  non-preemptive  response  time  test  found  that  only  four 
tasks  would  miss  their  deadlines.  The  inability  to  preempt  a  low  priority  task  in  order  to 
execute  a  high  priority  task  is  a  major  weakness  in  fixed  priority  non-preemptive 
scheduling,  leading  to  increased  jitter  and  response  times  for  high  priority  tasks,  and 
makes  this  algorithm  unsuitable  for  the  heavily  loaded  system. 

Asynchronous  fixed  priority  scheduling  has  been  subjected  to  an  analysis  that  determines 
worst-case  response  times  to  establish  schedulability.  Although  the  schedulability  test  has 
a  worst-case  exponential  computational  complexity,  in  practical  applications  the 
complexity  can  be  much  better  than  the  worst-case,  and  for  the  generic  avionics  mission 
system  task  set  computational  complexity  was  of  no  significant  concern.  The  outcome  of 
the  schedulability  test  was  that  all  tasks  were  completed  before  their  deadlines,  a  result 
that  was  unachievable  by  synchronous  fixed  priority  scheduling,  and  asynchronous  fixed 
priority  scheduling  is  suitable  for  the  heavily  loaded  system. 

Dynamically  prioritised  preemptive  scheduling  has  been  analysed  and  found  to 
successfully  schedule  the  generic  avionics  mission  system  tasks.  This  algorithm  is  able  to 
utilise  up  to  100%  of  processor  capacity,  but  would  not  provide  predictable  operation 
under  transient  overload,  and  involves  a  more  complex  implementation  and  higher 
run-time  overheads  than  fixed  priority  scheduling. 

A  statically  designed  schedule  has  been  demonstrated  to  successfully  schedule  the  generic 
avionics  mission  system  tasks.  Statically  designed  schedules  are  used  where  deterministic 
operation  is  required,  or  where  the  run-time  overheads  of  dynamic  scheduling  can  not  be 
accommodated.  Disadvantages  of  static  scheduling  include  the  need  for  significant 
schedule  redesign  effort  when  the  timing  of  any  task  in  the  task  set  changes. 
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